diff --git a/Deployment/host.conf.template b/Deployment/host.conf.template
index 7eb92cb..c829532 100644
--- a/Deployment/host.conf.template
+++ b/Deployment/host.conf.template
@@ -570,7 +570,7 @@
     HOSTN_LLDAP_PASS=""                         # lldap admin password
 
 # ━━━ Authelia ━━━
-    HOSTN_AUTHELIA_CONFIG="/mnt/user/appdata/Authelia/configuration.yml"
+    HOSTN_AUTHELIA_CONFIG="/mnt/user/appdata-Fallback/Critical-Data/Authelia/configuration.yml"
     HOSTN_AUTHELIA_CONTAINER="Authelia"
 
 # ==============================================================================================
diff --git a/Deployment/master.conf.template b/Deployment/master.conf.template
index c9d5797..be2f41d 100644
--- a/Deployment/master.conf.template
+++ b/Deployment/master.conf.template
@@ -424,7 +424,7 @@
 # Media shares synced daily by daily_sync_maintenance.sh.
 # Defined per-host in host*.conf — HOST1_DAILY_SYNC_SHARES and HOST2_DAILY_SYNC_SHARES.
 # Mesh model: every node pushes every media share. rsync has no --delete so pushes are additive.
-# arr_sync (union) ensures all arr libraries converge first. arr_cleanup removes true orphans.
+# arr_sync (union) ensures all arr libraries converge first. the arr cleanups remove true orphans.
 # Any node can download content to any share — it propagates to all nodes on the next cycle.
 # Adding HOST3: list every media share in HOST3_DAILY_SYNC_SHARES. No ownership to track.
 # These shares use DEFAULT_RSYNC_OPTS — no profile entry needed.
@@ -486,7 +486,7 @@
 # monthly_maintenance.sh fires only when BOTH gates pass:
 #   1. Server uptime >= MONTHLY_UPTIME_THRESHOLD_DAYS days
 #   2. Last run was >= MONTHLY_RUN_INTERVAL_DAYS days ago (or never run)
-# Cron: 0 3 * * * (daily 3am check — script self-gates, calling daily is safe)
+# Cron: 0 0 15 * * (15th of the month, midnight — script self-gates, so a spare run is safe)
 # NOT in WATCHDOG_ORCHESTRATOR_SCRIPTS — has its own cron entry.
 # Add scripts that require a long-stable settled system — scrubs, extended drive tests.
 # State file on /boot/config — survives reboots (interval gate independent of uptime gate).
@@ -578,10 +578,11 @@
 # --partial      keep partial file on interrupted transfer so next run resumes, not re-transfers
 # --timeout      kill stalled transfers instead of hanging indefinitely
 # --numeric-ids  use UIDs/GIDs numerically — prevents ownership mismatches between servers
-# --delete intentionally omitted — arr_cleanup.sh enforces media truth post-rsync.
+# --delete intentionally omitted — the per-arr cleanups (lidarr/sonarr/radarr_cleanup.sh)
+# enforce media truth post-rsync.
 # Media shares use this default; rsync spreads files only, never removes them.
 # Note: --no-whole-file removed — redundant over SSH (delta transfer is already the default).
-# Note: arr_cleanup only catches true orphans under the union model — intentional removals
+# Note: the arr cleanups only catch true orphans under the union model — intentional removals
 #       require arr_sync.sh --blocklist-add first, then manual file deletion.
     DEFAULT_RSYNC_OPTS=(-av --info=progress2 --human-readable --bwlimit="$BW_LIMIT" --inplace --partial --timeout=60 --numeric-ids)
 
@@ -1075,7 +1076,7 @@
     LIDARR_IMPORT_SCAN_TIMEOUT=600  # seconds to wait for pre-flight import scan
 
 # Lidarr tracked-data cache — shared by lidarr_cleanup.sh, lidarr_duplicate_artist_cleanup.sh,
-# lidarr_missing_art.sh, lidarr_release_fixer.sh, and lidarr_cache_prefill.sh. See
+# lidarr_missing_art.sh, lidarr_release_fixer.sh, and arr_cache_prefill.sh. See
 # lidarr_get_tracked_data() in common.sh for the fresh/stale/rescan-active branching logic.
     LIDARR_CACHE_FILE="$DATA_DIR/lidarr_tracked_cache.json"
     LIDARR_RESCAN_DURATION_DB="$DATA_DIR/lidarr_rescan_duration.db"
@@ -1261,7 +1262,7 @@
 
 # ━━━ Arr Failed/Stalled Recovery ━━━
 # Auto blocklist + re-search failed imports and stalled downloads.
-# Runs every 6 hours — schedule: 0 */6 * * *
+# Runs every 4 hours via INTERMEDIATE_MAINTENANCE_SCRIPTS — no cron entry of its own.
 #
 # Targets five problem types:
 #   importFailed   — downloaded but arr couldn't import
@@ -1490,7 +1491,7 @@
 # ── SYSTEM WATCHDOG ───────────────────────────────────────────────────────────────────────────
 # ==============================================================================================
 # Single-pass system health check — last line of defense before a crash.
-# Called by watchdog_orchestrator.sh every minute. NOT started by array_started.sh.
+# Called by watchdog_orchestrator.sh every 15 minutes. NOT started by array_started.sh.
 # Re-sources config at each orchestrator run — config changes take effect immediately.
 #
 # ── THREE-TIER RESPONSE SYSTEM ────────────────────────────────────────────────────────────────
diff --git a/Plugin/unraid/include/auth.php b/Plugin/unraid/include/auth.php
index 5f7b1ca..8342851 100644
--- a/Plugin/unraid/include/auth.php
+++ b/Plugin/unraid/include/auth.php
@@ -7,7 +7,7 @@ function vv_auth_conf(): array {
     $v    = vv_conf_vars();
     $host = strtoupper(vv_detect_host());
     return [
-        'npm_url'            => rtrim($v["{$host}_NPM_URL"]            ?? 'http://localhost:81', '/'),
+        'npm_url'            => rtrim($v["{$host}_NPM_URL"]            ?? 'http://localhost:7818', '/'),
         'npm_user'           => $v["{$host}_NPM_USER"]                 ?? '',
         'npm_pass'           => $v["{$host}_NPM_PASS"]                 ?? '',
         'lldap_url'          => rtrim($v["{$host}_LLDAP_URL"]          ?? 'http://localhost:17170', '/'),